This notice, under Art. 100 of the Croatian Electronic Communications Act and the GDPR, describes what studiomarcela.hr stores on your device. We use strictly necessary and functional cookies only — no third-party tracking or profiling cookies, so no consent pop-up is shown. Ad conversions are measured in cookie-free mode.
| Name | Type | Purpose | Duration |
|---|---|---|---|
lang | first-party cookie | Remembers the language you chose with the flag switch. | 12 months |
kx_token | first-party cookie, HttpOnly | Keeps you signed in on Correction and My profile after the code check (WhatsApp/e-mail). | up to 12 months from last use; “Not you? Sign out” removes it |
sm_booking_ph, SK_UUID | local storage | Details you type when booking online (name, e-mail, mobile) and a device id, for faster rebooking and suggesting your usual salon. | until you delete them |
sm_attr | local storage | The campaign you arrived from (utm/gclid/fbclid) so we know which ad brings bookings; attached only to your own booking. | 30 days |
_fbc, sm_attribution, sm_gclid | first-party cookie / sessionStorage | Set only when you arrive from a Facebook/Instagram or Google ad (fbclid/gclid), to measure ad conversions and note the booking source. | until the browser is closed (session) |
sm_cart, sm_shop_pickup | local storage | Your web shop cart and chosen pickup salon. Stays in your browser; the server sees it only when you submit the order. | until you finish the purchase or empty the cart |
__stripe_mid, __stripe_sid | third-party cookies (Stripe) | On the payment page only: fraud prevention and secure card processing by Stripe Payments Europe, Ltd. — required for payment. | 12 months / 30 minutes |
_GRECAPTCHA | third-party cookie (Google) | Google reCAPTCHA v3 on forms (contact, careers, booking, web shop): protection against automated abuse. Google's privacy policy applies. | 6 months |
Google Ads conversions use gtag in storage: none mode — it sets no cookies and stores no identifiers on your device. Meta (Facebook/Instagram) conversions are sent server-side (Conversions API) only for bookings and contacts you make yourself, with no Meta pixel in the browser. We use no Google Analytics or other visitor analytics.
You can view and delete cookies and local storage in your browser settings (e.g. Chrome: Settings → Privacy and security → Cookies and site data). Blocking lang and kx_token means choosing the language and signing in every time; blocking Stripe's cookies may prevent card payment. Questions: info@studiomarcela.hr; more in our privacy policy.